REMARKS 

In view of the following remarks, Applicants respectfully request 
reconsideration and allowance of the subject application. Claims 1, 11, 13, 14, 15, 17 
and 18 are amended. Claims 1-5 and 8-21 are pending. 

Claim Rejection under 35 U.S.C. § 112 

Claim 18 is rejected under 35 U.S.C 112 because there is insufficient 
antecedent basis for the limitation of "the first value". The Applicant has amended 
Claim 1 8 to correct the antecedent basis of the noted limitation. 

Claim Rejections under 35 U.S.C. § 103(a) 

Claims 1-5, 8-17 and 19-21 stand rejected under 35 U.S.C. § 103(a) as being 
unpatentable over U.S. Patent No. 6,125,447 to Gong (hereinafter "Gong") in view of 
U.S. Patent No. 6,463,535 to Drews (hereinafter "Drews"). Claim 18 stands rejected 
under 35 U.S.C. § 103(a) as being unpatentable over Gong in view of Drew in view of 
U.S. Patent No. 6,687,823 to Al-Salqan (hereinafter "Al-Salqan"). 

Claim 1 has been amended, and as amended (portion of the amendment appear 

in bold/italics below) recites a method of associating a permission set with a code 

assembly based on evidence characterized by different levels of trust, the method 

implemented at least in part by a computing device comprising: 

• identifying a first condition for association with the permission set, wherein 
the first condition references a first element of evidence, wherein the first 
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element of evidence is implicitly trusted and wherein the permission set is 
used to control operation of the code assembly during run-time; 

• identifying a second condition for association with the permission set, 
wherein the second condition references a second element of evidence, 
wherein the second element of evidence is initially untrusted; 

• determining whether the first condition is satisfied by the first element of 
evidence; 

• determining whether the second element of evidence should be trusted 
based on the first condition; 

• determining whether the second condition is satisfied by the second 
element of evidence; 

• associating the permission set with the code assembly, if both the first 
condition and the second condition are satisfied; 

• evaluating the first condition and the second condition using a logical 
operation to determine membership of the code assembly in a parent code 
group; and 

• evaluating the code assembly against membership criteria of a child code 
group if the code assembly is a member of the parent code group. 

Support for the amendment may be found throughout the specification and drawings 

as filed, an example of which may be found in the first full paragraph of page 30 of 

the subject Application. It is respectfully submitted that neither Gong nor Drews, 

alone or in combination, teach or suggest these features. Acco r d ingl y, this claim is 

believed to be allowable as written over the asserted references. 

Claim 11 has been amended, and as amended (portion of the amendment 

appear in bold/italics below) recites one or more computer-readable media having 

instructions that, when executed on one or more processors perform a process for 

associating a permission set with a code assembly based on evidence characterized by 

different levels of trust comprising: 

• generating a collection of code groups, wherein each code group is used to 
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define a category of related code assemblies, each code group being 
associated with a membership criterion and a permission set used to control 
operation of the code assembly during run-time; 

• receiving the membership criterion associated with a parent code group, 
the membership criterion including at least a first condition and a second 
condition; 

• referencing a first element of evidence in the first condition, wherein the 
first element of evidence is trusted independent of other evidence and 
conditions; 

• referencing a second element of evidence in the second condition, wherein 
the second element of evidence is initially untrusted; 

• determining whether the first condition is satisfied by the first element of 
evidence; 

• determining whether the second element of evidence should be trusted 
based on the first condition; 

• determining whether the second condition is satisfied by the second 
element of evidence; 

• evaluating the first condition and the second condition using a logical 
operation to determine membership of the code assembly in the parent 
code group; 

• if the code assembly is a member of the parent code group, evaluating the 
code assembly against membership criteria of a child code group; and 

• associating the permission set with the code assembly, if the code assembly 
is determined to be a member of the parent code group. 

Support for the amendment may be found throughout the specification and d r awings 

as filed, an example of which may be found in the first full paragraph of page 30 of 

the subject Application. It is respectfully submitted that neither Gong nor Drews, 

alone or in combination, teach or suggest these features. Accordingly, this claim is 

believed to be allowable as written over the asserted references. 

Claim 13 has been amended, and as amended (portion of the amendment 

appear in bold/italics below) recites one or more computer-readable media having 

computer-executable instructions for performing a method of associating a permission 
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set with a code assembly based on evidence characterized by different levels of trust 
comprising: 

• receiving a first condition referencing a first element of evidence, wherein 
the first condition is associated with the permission set and the first element 
of evidence is trusted independent of other evidence and conditions; 

• receiving a second condition referencing a second element of evidence, 
wherein the second condition is associated with the permission set and the 
second element is initially untrusted; 

• determining whether the first condition is satisfied by the first element of 
evidence; 

• determining whether the second element should be trusted based on the first 
condition; 

• determining whether the second condition is satisfied by the second 
element of evidence; 

• evaluating the first condition and the second condition using a logical 
operation to determine membership of the code assembly in a parent code 
group; 

• associating the permission set with the code assembly, if both the first and 
second conditions are satisfied, wherein the permission set is used to 
control operation of the code assembly during run-time; and 

• if the code assembly is a member of the parent code group, evaluating the 
code assembly against membership criteria of a child code group. 

Support for the amendment may be found throughout the specification and drawings 

as filed, an example of which may be found in the first full paragraph of page 30 of 

the subject Application. It is respectfully submitted that neither Gong nor Drews, 

alone or in combination, teach or suggest these features. Accordingly, this claim is 

believed to be allowable as written over the asserted references. 

Claim 14 has been amended, and as amended (portion of the amendment 

appear in bold/italics below) recites one or more computer-readable media having 

instructions that, when executed on one or more computing processors, perform a 
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process for associating a permission set with a code assembly based on evidence 
characterized by different levels of trust comprising: 

• receiving at least a first condition referencing a first element of evidence, 
wherein the first condition is associated with the permission set and the first 
element of evidence is trusted independent of other evidence and 
conditions; 

• receiving at least a second condition referencing a second element of 
evidence, wherein the second condition is associated with the permission 
set and the second element is initially untrusted; 

• determining whether the first condition is satisfied by the first element of 
evidence; 

• determining whether the second element of evidence should be trusted 
based on the first condition; 

• determining whether the second condition is satisfied by the second 
element of evidence; 

• associating the permission set with the code assembly, if both the first and 
second conditions are satisfied, wherein the permission set is used to 
control operation of the code assembly during run-time; and 

• evaluating the first condition and the second condition using a logical 
operation to determine membership of the code assembly in a parent code 
group, and if a member, evaluating the code assembly against 
membership criteria of a child code group. 

- Suppo r t -i br the ame n dme n t may be found th r oug h out - t h e -s pecification and drawings 

as filed, an example of which may be found in the first full paragraph of page 30 of 

the subject Application. It is respectfully submitted that neither Gong nor Drews, 

alone or in combination, teach or suggest these features. Accordingly, this claim is 

believed to be allowable as written over the asserted references. 

Claim 15 has been amended, and as amended (portion of the amendment 

appear in bold/italics below) recites a policy manager for associating a permission set 

with a code assembly based on evidence characterized by different levels of trust, the 
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policy manager implemented by one or more computing devices comprising: 

• a code collection generator generating a collection of code groups, wherein 
each code group is used to define a category of related code assemblies, 
each code group being associated with the membership criterion and a 
permission set used to control operation of the code assembly during run- 
time; 

• a membership evaluator determining if the code assembly is a member of a 
parent said code group by evaluating at least a first condition and a second 
condition associated with the parent said code group, and if so, evaluating 
membership of the code assembly in a child said code group, the first 
condition referencing an implicitly trusted first element of evidence; the 
second condition referencing an initially untrusted second element of 
evidence, wherein a determination of trust associated with the second 
element of evidence is based on the first condition; and 

• a permission set generator associating the permission set of the parent said 
code group with the code assembly, if the code assembly is determined to 
be a member of the parent said code group. 

Support for the amendment may be found throughout the specification and drawings 

as filed, an example of which may be found in the first full paragraph of page 30 of 

the subject Application. It is respectfully submitted that neither Gong nor Drews, 

alone or in combination, teach or suggest these features. Accordingly, this claim is 

believed to be allowable as written over the asserted references. 

Claim 17 has been amended, and as amended (portion of the amendment 

appear in bold/italics below) recites one or more computer-readable media having 

instructions that, when executed on one or more processors, perform a process for 

associating a permission set with a code assembly based on evidence characterized by 

different levels of trust, the computer process comprising: 

• receiving one or more first conditions, each first condition being associated 
with one or more first elements of evidence, wherein each first condition is 
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associated with the permission set used to control operation of the code 
assembly during run-time; 

• determining whether each first condition is satisfied by an associated first 
element of evidence; 

• generating an indication for each first condition that is satisfied; 

• receiving a second condition associated with the permission set; 

• determining whether the second condition is satisfied based on the 
indications, wherein a level of trust associated with the indications depends 
upon a first condition of the one or more first conditions; 

• evaluating the first condition and the second condition using a logical 
operation to determine membership of the code assembly in a parent code 
group; 

• evaluating the code assembly against membership criteria of a child code 
group if the code assembly is a member of the parent code group; and 

• associating the permission set with the code assembly, if both the first 
condition in the second condition are satisfied. 

Support for the amendment may be found throughout the specification and drawings 

as filed, an example of which may be found in the first full paragraph of page 30 of 

the subject Application. It is respectfully submitted that neither Gong nor Drews, 

alone or in combination, teach or suggest these features. Accordingly, this claim is 

- Jae l ig y ed - to be a ll owable as written ove r Jke - ^^ri^refer -e nces . 

Claims 2-5, 8-10, 12, 16 and 19-21 depend either directly or indirectly from 

an allowable base claim. These claims are also allowable for their own recited 

features which, in combination with those recited in their respective independent 

claims, are neither shown nor suggested in the references of record, either singly or in 

combination with one another. 
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Conclusion 

Claims 1-5 and 8-21 are believed to be in condition for allowance. Applicant 
respectfully requests prompt allowance of the subject application. Should any issue 
remain unresolved that would prevent allowance of this case, the Examiner is 
requested to contact the undersigned attorney to resolve the issue. 



Respectfully Submitted, 





Lee & Hayes, PLLC 

Reg. No. 45,313 

(509) 324-9256 ext. 249 
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